Patch Detail
get:
Show a patch.
patch:
Update a patch.
put:
Update a patch.
GET /api/1.1/patches/2229656/?format=api
{ "id": 2229656, "url": "http://patchwork.ozlabs.org/api/1.1/patches/2229656/?format=api", "web_url": "http://patchwork.ozlabs.org/project/netfilter-devel/patch/20260428151913.584739-6-kadlec@netfilter.org/", "project": { "id": 26, "url": "http://patchwork.ozlabs.org/api/1.1/projects/26/?format=api", "name": "Netfilter Development", "link_name": "netfilter-devel", "list_id": "netfilter-devel.vger.kernel.org", "list_email": "netfilter-devel@vger.kernel.org", "web_url": null, "scm_url": null, "webscm_url": null }, "msgid": "<20260428151913.584739-6-kadlec@netfilter.org>", "date": "2026-04-28T15:19:13", "name": "[5/5] netfilter: ipset: fix order of usage counters", "commit_ref": null, "pull_url": null, "state": "changes-requested", "archived": true, "hash": "39dd355c6e44346581b0593ca208e0ce1978c390", "submitter": { "id": 77226, "url": "http://patchwork.ozlabs.org/api/1.1/people/77226/?format=api", "name": "Jozsef Kadlecsik", "email": "kadlec@netfilter.org" }, "delegate": { "id": 11902, "url": "http://patchwork.ozlabs.org/api/1.1/users/11902/?format=api", "username": "strlen", "first_name": "Florian", "last_name": "Westphal", "email": "fw@strlen.de" }, "mbox": "http://patchwork.ozlabs.org/project/netfilter-devel/patch/20260428151913.584739-6-kadlec@netfilter.org/mbox/", "series": [ { "id": 501876, "url": "http://patchwork.ozlabs.org/api/1.1/series/501876/?format=api", "web_url": "http://patchwork.ozlabs.org/project/netfilter-devel/list/?series=501876", "date": "2026-04-28T15:19:09", "name": "netfilter: ipset fixes", "version": 1, "mbox": "http://patchwork.ozlabs.org/series/501876/mbox/" } ], "comments": "http://patchwork.ozlabs.org/api/patches/2229656/comments/", "check": "pending", "checks": "http://patchwork.ozlabs.org/api/patches/2229656/checks/", "tags": {}, "headers": { "Return-Path": "\n <netfilter-devel+bounces-12260-incoming=patchwork.ozlabs.org@vger.kernel.org>", "X-Original-To": [ "incoming@patchwork.ozlabs.org", "netfilter-devel@vger.kernel.org" ], "Delivered-To": "patchwork-incoming@legolas.ozlabs.org", "Authentication-Results": [ "legolas.ozlabs.org;\n\tdkim=pass (1024-bit key;\n unprotected) header.d=blackhole.kfki.hu header.i=@blackhole.kfki.hu\n header.a=rsa-sha256 header.s=20151130 header.b=QpMTFViJ;\n\tdkim-atps=neutral", "legolas.ozlabs.org;\n spf=pass (sender SPF authorized) smtp.mailfrom=vger.kernel.org\n (client-ip=172.234.253.10; helo=sea.lore.kernel.org;\n envelope-from=netfilter-devel+bounces-12260-incoming=patchwork.ozlabs.org@vger.kernel.org;\n receiver=patchwork.ozlabs.org)", "smtp.subspace.kernel.org;\n\tdkim=pass (1024-bit key) header.d=blackhole.kfki.hu\n header.i=@blackhole.kfki.hu header.b=\"QpMTFViJ\"", "smtp.subspace.kernel.org;\n arc=none smtp.client-ip=148.6.0.50", "smtp.subspace.kernel.org;\n dmarc=none (p=none dis=none) header.from=netfilter.org", "smtp.subspace.kernel.org;\n spf=pass smtp.mailfrom=blackhole.kfki.hu" ], "Received": [ "from sea.lore.kernel.org (sea.lore.kernel.org [172.234.253.10])\n\t(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)\n\t key-exchange x25519 server-signature ECDSA (secp384r1) server-digest SHA384)\n\t(No client certificate requested)\n\tby legolas.ozlabs.org (Postfix) with ESMTPS id 4g4kd83r3mz1xvV\n\tfor <incoming@patchwork.ozlabs.org>; Wed, 29 Apr 2026 01:19:56 +1000 (AEST)", "from smtp.subspace.kernel.org (conduit.subspace.kernel.org\n [100.90.174.1])\n\tby sea.lore.kernel.org (Postfix) with ESMTP id A1F2C3037684\n\tfor <incoming@patchwork.ozlabs.org>; Tue, 28 Apr 2026 15:19:32 +0000 (UTC)", "from localhost.localdomain (localhost.localdomain [127.0.0.1])\n\tby smtp.subspace.kernel.org (Postfix) with ESMTP id 2725A3B3BEB;\n\tTue, 28 Apr 2026 15:19:29 +0000 (UTC)", "from smtp-out.kfki.hu (smtp-out.kfki.hu [148.6.0.50])\n\t(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))\n\t(No client certificate requested)\n\tby smtp.subspace.kernel.org (Postfix) with ESMTPS id 98EC2359A6C\n\tfor <netfilter-devel@vger.kernel.org>; Tue, 28 Apr 2026 15:19:24 +0000 (UTC)", "from localhost (localhost [127.0.0.1])\n\tby smtp1.kfki.hu (Postfix) with ESMTP id 4g4kcP2ndvzGFDMp;\n\tTue, 28 Apr 2026 17:19:17 +0200 (CEST)", "from smtp1.kfki.hu ([127.0.0.1])\n by localhost (smtp1.kfki.hu [127.0.0.1]) (amavis, port 10026) with ESMTP\n id 0sR2Fo5mGjpz; Tue, 28 Apr 2026 17:19:15 +0200 (CEST)", "from mentat.rmki.kfki.hu (unknown [148.6.40.64])\n\t(Authenticated sender: kadlecsik.jozsef@wigner.hu)\n\tby smtp1.kfki.hu (Postfix) with ESMTPSA id 4g4kcK61mgzGFDMr;\n\tTue, 28 Apr 2026 17:19:13 +0200 (CEST)", "by mentat.rmki.kfki.hu (Postfix, from userid 1000)\n\tid 81F191414AF; Tue, 28 Apr 2026 17:19:13 +0200 (CEST)" ], "ARC-Seal": "i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116;\n\tt=1777389567; cv=none;\n b=nuY9SEAyNQeGzpC2/cqY19QV0kaHUxOkqkifTt36XqBAQc2Qy1x/I50khW2mJi5XKYOTAXLOYwncpMGvCydA7TJrPlw48kJKqRSlIaPU32yyzBMw7PbKctum2CNfMIIVz6jXbLQhmD33/ncAV2qODYW5EraFFf2EarupRxSOL+0=", "ARC-Message-Signature": "i=1; a=rsa-sha256; d=subspace.kernel.org;\n\ts=arc-20240116; t=1777389567; c=relaxed/simple;\n\tbh=4PR3s4ldTqxK1IGlliu6c4u0Nh+fexsvb2N/I/y//FU=;\n\th=From:To:Cc:Subject:Date:Message-Id:In-Reply-To:References:\n\t MIME-Version;\n b=L5ppiW2p7QmRWOZC1pPQTS6z+RilPbWKF4rAVIPlj72P4LKyMIiONd427tu5x6/CXndxXCT9gUyUrm2JH7dw4ZiGmNoAF3nue2scLjTXHZ3UsK8JFv5/aWjmX6E+XSXm0AD9oUIC+CF0hPkcb/25OVq33LA9GIIs67M4WI3Oxtc=", "ARC-Authentication-Results": "i=1; smtp.subspace.kernel.org;\n dmarc=none (p=none dis=none) header.from=netfilter.org;\n spf=pass smtp.mailfrom=blackhole.kfki.hu;\n dkim=pass (1024-bit key) header.d=blackhole.kfki.hu\n header.i=@blackhole.kfki.hu header.b=QpMTFViJ;\n arc=none smtp.client-ip=148.6.0.50", "DKIM-Signature": "v=1; a=rsa-sha256; c=relaxed/relaxed; d=\n\tblackhole.kfki.hu; h=mime-version:references:in-reply-to\n\t:x-mailer:message-id:date:date:from:from:received:received\n\t:received; s=20151130; t=1777389555; x=1779203956; bh=+xEURBhmlT\n\tYdd40zS6SZGv9bqG2AzPA3XWbRQNRV1X0=; b=QpMTFViJmSI3+p1gck0Qz5jeVc\n\ti4ZZwgxVz1S0AtrGFbAQTqdVUloxIXcJTLdNJBe8lI3j4gY0ieatvtWoohewxh/8\n\tntrOnyStYMPnTVdfb9GxszSYDS1MIFntcbQ8Ca4urUa7XeE8VKXq/hES8PSL+NXd\n\ts4wi5jsoCj90fG4FY=", "X-Virus-Scanned": "Debian amavis at smtp1.kfki.hu", "From": "Jozsef Kadlecsik <kadlec@netfilter.org>", "To": "netfilter-devel@vger.kernel.org", "Cc": "Pablo Neira Ayuso <pablo@netfilter.org>", "Subject": "[PATCH 5/5] netfilter: ipset: fix order of usage counters", "Date": "Tue, 28 Apr 2026 17:19:13 +0200", "Message-Id": "<20260428151913.584739-6-kadlec@netfilter.org>", "X-Mailer": "git-send-email 2.39.5", "In-Reply-To": "<20260428151913.584739-1-kadlec@netfilter.org>", "References": "<20260428151913.584739-1-kadlec@netfilter.org>", "Precedence": "bulk", "X-Mailing-List": "netfilter-devel@vger.kernel.org", "List-Id": "<netfilter-devel.vger.kernel.org>", "List-Subscribe": "<mailto:netfilter-devel+subscribe@vger.kernel.org>", "List-Unsubscribe": "<mailto:netfilter-devel+unsubscribe@vger.kernel.org>", "MIME-Version": "1.0", "Content-Transfer-Encoding": "quoted-printable" }, "content": "Eulgyu Kim reported a slab-use-after-free issue when resizing\na set and gc runs in parallel. Resizing may run parallel with\nalready running gc or gc can start but notice that resizing\nstarted. The operation which finishes last must destroy the\noriginal set. The logic for the testing is: \"I was the last\nuser of the set and it was resized\". However setting the\ncounters in resizing was: \"the set will be resized and I'm\ngoing to use the set\". That created a small racing window\nat the testing phase. Fix the order in the resizing functions.\n\nReported by: Eulgyu Kim <eulgyukim@snu.ac.kr>\nSigned-off-by: Jozsef Kadlecsik <kadlec@netfilter.org>\n---\n net/netfilter/ipset/ip_set_hash_gen.h | 2 +-\n 1 file changed, 1 insertion(+), 1 deletion(-)", "diff": "diff --git a/net/netfilter/ipset/ip_set_hash_gen.h b/net/netfilter/ipset/ip_set_hash_gen.h\nindex cc490460c52b..29af68347799 100644\n--- a/net/netfilter/ipset/ip_set_hash_gen.h\n+++ b/net/netfilter/ipset/ip_set_hash_gen.h\n@@ -681,8 +681,8 @@ mtype_resize(struct ip_set *set, bool retried)\n \t * between the original and resized sets.\n \t */\n \torig = ipset_dereference_bh_nfnl(h->table);\n-\tatomic_set(&orig->ref, 1);\n \tatomic_inc(&orig->uref);\n+\tatomic_set(&orig->ref, 1);\n \tpr_debug(\"attempt to resize set %s from %u to %u, t %p\\n\",\n \t\t set->name, orig->htable_bits, htable_bits, orig);\n \tfor (r = 0; r < ahash_numof_locks(orig->htable_bits); r++) {\n", "prefixes": [ "5/5" ] }